Passage @ HackTheBox

In this short writeup I will show how I completed Access on hackthebox.eu, a quite easy windows box that... read more

There is no excerpt because this is a protected post. read more

Patents is a 40-point Linux machine on HackTheBox. For user we exploit an external entity injection in a word... read more

LaCasaDePapel is a rather easy machine on hackthebox.eu, featuring the use of php reflection, creating and signing of client... read more

We are going to solve Ophiuchi a 30-point machine on HackTheBox that involves a YAML parser vulnerability and a... read more

Forest is a 20-point active directory machine on HackTheBox that involves user enumeration, AS-REP-Roasting and abusing Active Directory ACLs... read more

We are solving Tenet, a 30-point machine HackTheBox that involves a simple PHP deserialization vulnerability, password reuse and a... read more

Ellingson is fun and quick 40 points machine on hackthebox, featuring the abuse of the python/flask werkzeug debugger, cracking... read more

Time is a 30-point machine on HackTheBox that involves using a public exploit for a CVE and overwriting a... read more

In this post I will give a quick walkthrough on Giddy from hackthebox.eu. The machine involves (automated) sql injection,... read more